diff options
author | 2021-07-20 22:05:05 +0200 | |
---|---|---|
committer | 2021-07-20 22:05:23 +0200 | |
commit | a490e6725600bd58078ee0b23461e3e24c3145dd (patch) | |
tree | 6d273bdc50367a074229d9cbbd9a9ef8595a024e /etc | |
parent | Blacklist /*firefox* except for firefox itself (diff) | |
download | firejail-a490e6725600bd58078ee0b23461e3e24c3145dd.tar.gz firejail-a490e6725600bd58078ee0b23461e3e24c3145dd.tar.zst firejail-a490e6725600bd58078ee0b23461e3e24c3145dd.zip |
moved rules from firefox-common.profile to firefox.profile
Diffstat (limited to 'etc')
-rw-r--r-- | etc/profile-a-l/firefox-common.profile | 2 | ||||
-rw-r--r-- | etc/profile-a-l/firefox.profile | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/etc/profile-a-l/firefox-common.profile b/etc/profile-a-l/firefox-common.profile index 557e3559b..cb0fae5dc 100644 --- a/etc/profile-a-l/firefox-common.profile +++ b/etc/profile-a-l/firefox-common.profile | |||
@@ -14,7 +14,6 @@ include firefox-common.local | |||
14 | 14 | ||
15 | nodeny ${HOME}/.pki | 15 | nodeny ${HOME}/.pki |
16 | nodeny ${HOME}/.local/share/pki | 16 | nodeny ${HOME}/.local/share/pki |
17 | nodeny ${RUNUSER}/*firefox* # location of profiles if profile-sync-daemon is used | ||
18 | 17 | ||
19 | include disable-common.inc | 18 | include disable-common.inc |
20 | include disable-devel.inc | 19 | include disable-devel.inc |
@@ -27,7 +26,6 @@ mkdir ${HOME}/.local/share/pki | |||
27 | allow ${DOWNLOADS} | 26 | allow ${DOWNLOADS} |
28 | allow ${HOME}/.pki | 27 | allow ${HOME}/.pki |
29 | allow ${HOME}/.local/share/pki | 28 | allow ${HOME}/.local/share/pki |
30 | allow ${RUNUSER}/*firefox* | ||
31 | include whitelist-common.inc | 29 | include whitelist-common.inc |
32 | include whitelist-runuser-common.inc | 30 | include whitelist-runuser-common.inc |
33 | include whitelist-var-common.inc | 31 | include whitelist-var-common.inc |
diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile index 8acfe7c2a..93d32d141 100644 --- a/etc/profile-a-l/firefox.profile +++ b/etc/profile-a-l/firefox.profile | |||
@@ -16,6 +16,7 @@ include globals.local | |||
16 | 16 | ||
17 | nodeny ${HOME}/.cache/mozilla | 17 | nodeny ${HOME}/.cache/mozilla |
18 | nodeny ${HOME}/.mozilla | 18 | nodeny ${HOME}/.mozilla |
19 | nodeny ${RUNUSER}/*firefox* # location of profiles if profile-sync-daemon is used | ||
19 | 20 | ||
20 | deny /usr/libexec | 21 | deny /usr/libexec |
21 | 22 | ||
@@ -35,6 +36,7 @@ allow /usr/share/gnome-shell/search-providers/firefox-search-provider.ini | |||
35 | allow /usr/share/gtk-doc/html | 36 | allow /usr/share/gtk-doc/html |
36 | allow /usr/share/mozilla | 37 | allow /usr/share/mozilla |
37 | allow /usr/share/webext | 38 | allow /usr/share/webext |
39 | allow ${RUNUSER}/*firefox* | ||
38 | include whitelist-usr-share-common.inc | 40 | include whitelist-usr-share-common.inc |
39 | 41 | ||
40 | # firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin. | 42 | # firefox requires a shell to launch on Arch - add the next line to your firefox.local to enable private-bin. |